553f5f10bc1c50e0df312f5b5bdcc8399a19c326ae81fbe90c258612f7d9a4ac | Triage

Sharing

General

Target

553f5f10bc1c50e0df312f5b5bdcc8399a19c326ae81fbe90c258612f7d9a4acN
Size

479KB
Sample

240920-fmwa6szgkp
MD5

22d0d112ace3364c8b805dee52f88990
SHA1

ea4938137d0079848a51b9e1db7e0d45db8df576
SHA256

553f5f10bc1c50e0df312f5b5bdcc8399a19c326ae81fbe90c258612f7d9a4ac
SHA512

36b1ec23b850ce0c9583d7df19e0726d1ef13cfc62a712641494105354c1889cf77ec6f0aea1ad528d83944047189fa68e9b9047125801e0bdcdf6106827c5bb
SSDEEP

6144:eYD5uQy90/IRJ6EQnT2leTLgNPx33fpu2leTLg:VD5u39TRJ6EQ6Q2drQ

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  553f5f10bc1c50e0df312f5b5bdcc8399a19c326ae81fbe90c258612f7d9a4acN
- Size
  
  479KB
- MD5
  
  22d0d112ace3364c8b805dee52f88990
- SHA1
  
  ea4938137d0079848a51b9e1db7e0d45db8df576
- SHA256
  
  553f5f10bc1c50e0df312f5b5bdcc8399a19c326ae81fbe90c258612f7d9a4ac
- SHA512
  
  36b1ec23b850ce0c9583d7df19e0726d1ef13cfc62a712641494105354c1889cf77ec6f0aea1ad528d83944047189fa68e9b9047125801e0bdcdf6106827c5bb
- SSDEEP
  
  6144:eYD5uQy90/IRJ6EQnT2leTLgNPx33fpu2leTLg:VD5u39TRJ6EQ6Q2drQ
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence